Npm MCP

🚀 NPM MCP

Model Context Protocol server for npm registry. It allows you to search packages, check security, compare versions, and validate compatibility. You can use it from Cursor AI or Claude Desktop.

🚀 Quick Start

The NPM MCP is a Model Context Protocol server for the npm registry. It offers a range of features to enhance your package management experience. You can search for packages, perform security checks, compare versions, and validate compatibility. It can be used with Cursor AI or Claude Desktop.

✨ Features

• Auto-Security — AI automatically checks packages before suggesting install (no user action!)
• Capabilities Analysis — ESM/CJS, TypeScript, Platform support (Node/Browser/Deno), Build tools
• Quick Start Generator — Ready-to-use code examples for any package
• Package Comparison — Compare alternatives side-by-side (features, size, popularity)
• Bundle Size Analysis — Minified/gzipped sizes, tree-shaking, impact on your bundle
• Similar Packages — Find alternatives and similar packages
• Search — Find packages with ranking and scores
• Details — Versions, dependencies, download stats, deprecation status
• Security — Vulnerability check and safe version tips
• Compatibility — Peer dependency and version conflicts
• Quality — Maintenance and community metrics
• Version compare — Breaking changes and semver
• NPX check — Validate npx commands before running

📦 Installation

With npx (recommended)

No global install. Add to Cursor or Claude config:

Cursor — ~/.cursor/mcp.json:

{
  "mcpServers": {
    "npm-registry-mcp": {
      "command": "npx",
      "args": ["@alisaitteke/npm-mcp"]
    }
  }
}

Claude Desktop — ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):

{
  "mcpServers": {
    "npm-registry-mcp": {
      "command": "npx",
      "args": ["@alisaitteke/npm-mcp"]
    }
  }
}

Global install (optional)

npm install -g @alisaitteke/npm-mcp

Then use "command": "npm-mcp" (no args) in the config above.

💻 Usage Examples

Once the server is connected, you can ask things like:

• “Search for React state management libraries”
• “Security audit for express@4.18”
• “Is lodash@4.17 compatible with my current deps?”
• “Compare React 17 and 18”
• “Quality check for date-fns”
• “Is it safe to run npx create-next-app?”

📄 License

MIT

Contributors

    <br />
    <sub><b>Ali Sait Teke</b></sub>
  </a>
  <br />
  <sub>Creator & Maintainer</sub>
</td>

Thanks to everyone who helps improve this project!